無(wú)線(xiàn)移動(dòng)自組網(wǎng)混合式密鑰管理方案研究

基于門(mén)限機制的密鑰管理方案能提供高的安全性，但認證成功率較低，可擴展性差；基于證書(shū)鏈的密鑰管理方案適合自組網(wǎng)的特點(diǎn)，但其安全性?xún)H取決于證書(shū)鏈中節點(diǎn)的信任度，不能滿(mǎn)足高安全要求的應用環(huán)境。該文提出了門(mén)限機制和證書(shū)鏈信任值方法相結合的混合式密鑰管理和認證方案，在增加少量通信量的情況下，方案提高了自組網(wǎng)的認證成功率和系統的安全性，較好地平衡了自組網(wǎng)的安全性和認證成功率，滿(mǎn)足自組網(wǎng)應用的安全要求。
關(guān) 鍵 詞 自組網(wǎng); 證書(shū)鏈; 密鑰管理; 門(mén)限機制

A New Hybrid Key Management Scheme for Ad hoc Networks
WANG Hao1，XIE Ying1，ZHENG Wu2
(1. College of Automation, Chongqing University of Posts and Telecommunications Nan′an Chongqing 400065; 2. School of Computer Science and Engineering, University of Electronic Science and Technology of China Chengdu 610054)
Abstract Key management schemes based on threshold mechanism can provide high security, but lower certificate success rate and bad scalability; key management schemes based on certification chain satisfy self-organized features, but their security depends on trust degree of nodes and could not be applied high security environment. We advance hybrid key management scheme based on threshold mechanism and certification chain. Simulation shows that with less increment of communication overhead, our scheme can improve both certificate success rate and system security and better balances security and availability, and satisfies security needs of Ad hoc networks.
Key words Ad hoc; certification chain; key management; threshold mechanism

無(wú)線(xiàn)移動(dòng)自組網(wǎng)是一種節點(diǎn)可任意移動(dòng)、拓撲結構高度動(dòng)態(tài)變化、沒(méi)有預設網(wǎng)絡(luò )基礎設施的多跳無(wú)線(xiàn)網(wǎng)絡(luò )。這種無(wú)線(xiàn)網(wǎng)絡(luò )具有可臨時(shí)組網(wǎng)、快速展開(kāi)、無(wú)控制中心、抗毀滅等特點(diǎn)，在軍事通信和民用系統中有著(zhù)廣泛的應用。然而，由于自組網(wǎng)的無(wú)線(xiàn)鏈路、動(dòng)態(tài)拓撲、缺乏集中管理和資源受限等特點(diǎn)，其本身就是很脆弱的，容易遭受多種攻擊，而且傳統的安全機制不再適合于它，極大地阻礙了自組網(wǎng)的應用，特別是在關(guān)系到國防安全的軍事領(lǐng)域。自組網(wǎng)的密鑰管理和認證是自組網(wǎng)安全研究的核心問(wèn)題之一，也是自組網(wǎng)安全研究中最困難的問(wèn)題之一，是研究自組網(wǎng)安全通信和安全路由的基礎[1]。